In July 2024, a software update went wrong, causing chaos in the airline industry and beyond. A bug in the CrowdStrike software impacted 8.5 million computers globally, leaving people scrambling for alternative solutions. One of the first to notice was Anthony Bosman, an academic from Andrews University in Michigan. He couldn’t download his boarding pass for a flight to Florida. When he went to the airport check-in counter, he was surprised to see the staff using paper lists and handwriting boarding passes. “It felt like a blast from the past,” he recalls.

This issue wasn’t limited to airports. Banks, telecom firms, health services, and retailers were also affected. The CrowdStrike bug caused global disruption, leading some organizations to rely on old-fashioned pen-and-paper methods to keep things moving. A senior executive from the firm later apologized to a US congressional committee for the chaos.

A Familiar Fix in the Face of Tech Failures

When major cyber-attacks or IT failures hit, it’s not uncommon for organizations to fall back on paper-based processes. From British GPs to France’s Rouen hospital, and even Lincolnshire County Council, countless examples show how pen and paper become lifelines when digital systems go down. While it’s not an ideal solution, some experts suggest that companies should prepare for this possibility by training staff to switch seamlessly to paper methods during a crisis.

One company that knows this well is Norsk Hydro, a Norwegian aluminium and energy firm. In 2019, a ransomware attack locked out over 20,000 of its computers. Instead of paying the ransom, Norsk Hydro relied on printed binders and other manual workarounds to keep production going. Staff even bought new computers and printers from local stores to help the effort. “You do what you need to do,” says Halvor Molland, the company spokesperson. Their creativity kept the business running, even with production reduced by 50% in some plants.

The Importance of Manual Methods

As more cyber-attacks occur, experts like Chris Butler, from Databarracks, emphasize the importance of preparing for digital outages. Some companies are even assembling “disaster recovery packs” filled with paper forms and old-school tools like fax machines. These kits can help companies continue operating when their computer systems fail. Butler also recommends that companies hold practice days where employees use flipcharts and whiteboards to simulate working without computers.

Certain organizations, like parts of the US court system, still use paper for security reasons, requiring some documents to be filed manually or on encrypted devices. However, not all tasks can be done with pen and paper. For instance, bankers would struggle to continue trading without their high-tech systems. Gareth Mott from the Royal United Services Institute notes that while pen-and-paper methods don’t scale well for large organizations, practising such workarounds can still help during emergencies.

Other Simple Solutions for Cyber Incidents

It’s not just about using pen and paper. Companies can prepare in other ways, too. For example, one business purchased crates of Chromebooks to help employees continue working during a cyber incident  without relying on the main network. Others may turn to apps like WhatsApp or Signal for internal communications when email systems go down.

Additionally, having segregated or off-site backups is crucial. Cathy Miron, CEO of eSilo, a data backup firm, explains how secure off-site backups can ensure that vital data isn’t lost during an attack. Her company offers cloud-based and custom on-site servers, boasting a 100% ransomware recovery rate.

In the end, even with the most advanced technology, simple and improvised solutions—like pen and paper—can be lifesavers during an IT crisis. As Molland wisely notes, “You should expect to be a victim of a cyber-attack at some point. The question is, how do you keep things running in the meantime?”